Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa
File:                     34352e3136372e31322e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier:          zjdssXAwCKXtW1TEdaOPlwejpulHjd4P1+0tVir3bO8=
Subject key identifier:   9C:D5:14:F5:5D:B6:4E:79:D9:B4:4A:C9:72:89:7D:69:08:2C:8C:77
Certificate issuer:       /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial:       6B491DBED464C2C98C7FC2A989EC43CE4EB490D7
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa
Signing time:             Tue 05 Mar 2024 18:01:22 +0000
ROA not before:           Tue 05 Mar 2024 17:56:22 +0000
ROA not after:            Tue 04 Mar 2025 18:01:22 +0000
asID:                     265534
IP address blocks:        45.167.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:49:1d:be:d4:64:c2:c9:8c:7f:c2:a9:89:ec:43:ce:4e:b4:90:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
        Validity
            Not Before: Mar  5 17:56:22 2024 GMT
            Not After : Mar  4 18:01:22 2025 GMT
        Subject: CN=9CD514F55DB64E79D9B44AC972897D69082C8C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:78:51:59:ad:d5:c9:22:03:60:83:d7:b8:55:
                    c3:e5:d6:0b:b3:17:5c:0f:ec:8d:37:ae:6d:d4:f8:
                    eb:e0:0e:ca:04:a3:d4:ed:89:d3:ab:71:f2:bb:7d:
                    e8:11:a6:f1:2d:60:c8:64:62:85:e7:ac:39:e1:d3:
                    40:8f:fd:b8:98:b1:bd:13:7c:9b:c6:b6:9e:37:cc:
                    22:f6:61:4c:d1:20:6d:04:fe:2e:ba:7f:f0:b4:27:
                    9a:61:50:da:48:37:f1:5a:0a:48:0c:a3:97:97:10:
                    ea:f2:54:fc:0e:94:48:5d:0a:4d:3a:3d:63:a1:1a:
                    ba:51:24:41:f4:b7:02:3c:1d:a2:27:1c:d7:ef:78:
                    59:39:fc:11:b0:89:f8:9d:3c:c5:0d:84:3f:03:96:
                    4f:3a:11:92:81:07:8f:85:c4:f0:3e:2e:a8:92:7c:
                    50:fb:6b:da:1b:6b:0b:40:a0:47:a8:75:f7:b7:08:
                    e3:c3:2f:51:6a:14:5d:dd:aa:9a:7b:cb:d6:79:4d:
                    17:46:a5:1e:28:81:24:e5:5a:58:20:18:e2:58:a0:
                    10:be:e4:12:7c:97:83:ef:f7:a8:06:51:4a:a0:9b:
                    01:78:b4:fe:4d:2d:53:86:1e:c3:40:f7:0b:2f:c6:
                    a1:c3:8f:13:c5:26:0d:ed:eb:56:c9:14:11:34:cf:
                    42:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D5:14:F5:5D:B6:4E:79:D9:B4:4A:C9:72:89:7D:69:08:2C:8C:77
            X509v3 Authority Key Identifier:
                keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:31:06:ac:b7:41:bb:0d:9f:13:72:3f:ce:43:7b:ed:29:9b:
         79:15:cd:a6:94:63:6a:9d:d7:53:85:ea:ef:19:83:ce:57:95:
         3b:3e:ad:e5:6e:65:b5:3d:a4:12:8d:2b:01:8b:26:ac:2f:16:
         1b:66:3a:8b:c8:b5:f2:3c:b9:22:19:82:f6:b1:17:c3:88:1a:
         2a:8b:78:21:c8:17:fd:bf:13:10:a5:fe:9c:1e:43:d0:1f:6f:
         c7:ac:f2:e5:6a:89:bd:ce:0f:6a:f6:97:49:ae:6c:e9:8b:c6:
         87:15:20:50:9b:2f:f6:5c:7c:46:9f:4f:36:29:3f:58:72:e6:
         f4:84:81:21:1f:29:cf:a8:be:b7:df:25:79:b3:fd:25:20:27:
         06:8b:93:b8:45:8c:0e:64:6c:84:a0:02:4c:b9:07:f7:1c:97:
         92:a6:55:1d:83:c1:82:f0:ee:ee:54:6a:9e:ea:23:e3:3f:f7:
         2b:18:1a:e0:43:f5:2c:23:5c:3a:8c:5f:4d:18:3c:59:be:20:
         60:b0:02:75:bf:e4:a1:0d:0d:9c:76:36:4a:b6:54:4e:b4:78:
         a0:1a:2e:eb:4a:07:1b:ed:28:a5:0e:77:15:49:d8:ee:ee:c2:
         fa:e8:1e:aa:aa:0b:33:0d:06:9f:76:18:16:eb:d6:30:0e:bb:
         b0:ad:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:09:01 2024 by rpki-client on console-ams.rpki-client.org